Security Bulletin: IBM TRIRIGA Application Platform Cross-Site Scripting Vulnerability (CVE-2017-1372)

Summary IBM TRIRIGA Application Platform is vulnerable to a Cross-Site Scripting vulnerability attack. Vulnerability Details CVEID: CVE-2017-1372 DESCRIPTION: IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code...

CVE-2017-1372

CVE-2017-1372 affects IBM TRIRIGA Application Platform 3.3.0–3.5.2.x. The issue is a cross-site scripting vulnerability in the Web UI caused by insufficient input filtering, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials in a trusted session. IBM remediati...